Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: qt9b9dH24DVUjIWYwX74ycG7g3pXOpg0BKKapob2zXw=
Subject key identifier: 2F:CC:5F:5A:4C:06:0C:D2:CC:EF:C7:82:90:CB:39:BF:B8:1F:58:9A
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 0199183FA97DCFB474D266F94031A878FA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0376
Signing time: Fri 05 Sep 2025 05:00:49 +0000
Manifest this update: Fri 05 Sep 2025 05:00:49 +0000
Manifest next update: Sat 06 Sep 2025 05:00:49 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: 98ud+PzE1fDJk+0sdDzK4ztwrt7PEvdM2JkFfq5ezoQ=)
2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:a9:7d:cf:b4:74:d2:66:f9:40:31:a8:78:fa:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Sep 5 05:00:49 2025 GMT
Not After : Sep 6 05:00:49 2025 GMT
Subject: CN=2fcc5f5a4c060cd2ccefc78290cb39bfb81f589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:ff:ff:a2:a8:bf:ac:82:b0:b1:47:bd:d0:
8c:e5:d4:32:86:d8:95:05:6a:6b:78:14:c1:03:d4:
59:53:ff:18:fd:da:4b:87:b7:79:3d:3d:02:51:7b:
17:6c:ea:5a:38:8f:8f:50:a9:11:c7:a8:73:66:61:
f8:2b:60:12:c4:be:7b:6d:77:f8:b7:ba:8d:28:00:
e9:83:f4:af:11:b3:b0:8b:9d:54:f7:b5:29:9e:01:
20:36:4c:ac:40:5d:70:9f:6e:a5:d2:9c:51:fa:d6:
74:c6:7f:90:31:58:bb:4a:8a:95:16:c2:cf:b3:70:
ae:97:78:d5:74:6e:45:45:5b:8b:9b:c5:32:55:6d:
66:9d:71:5d:7c:a7:1f:4d:a8:e0:a2:13:e2:6e:88:
31:84:63:dc:04:e3:23:c7:ab:48:f2:56:f2:52:63:
19:6f:6c:01:82:d2:1b:74:ca:7c:1a:7d:8d:d2:bc:
e8:4f:1a:11:ea:2c:0b:ee:41:e2:7e:1a:a2:c5:da:
ab:d6:cf:c2:bc:e0:09:b8:ce:67:52:02:e1:58:01:
5a:e0:da:89:d7:71:bd:ad:24:49:09:a6:fe:69:f3:
73:9d:bc:89:e5:f6:da:ec:d3:e2:f2:d8:07:ae:cd:
d3:25:9d:55:89:25:9c:51:f2:3a:a1:94:29:fb:e8:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:5F:5A:4C:06:0C:D2:CC:EF:C7:82:90:CB:39:BF:B8:1F:58:9A
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8d:9c:b0:ef:0f:87:98:2f:8c:e9:09:a7:f5:e0:92:d2:f8:
3a:a5:6e:1e:a5:95:2a:f7:7c:7b:11:bd:f3:e0:5c:61:5e:66:
1e:98:5f:43:b0:9d:1b:53:1d:08:cb:25:cf:32:7b:cf:d0:57:
ed:c7:01:85:fa:01:4d:83:3e:4c:3d:4d:0c:23:9c:ae:de:38:
d7:ea:fa:27:63:24:8b:ae:ad:cc:45:a2:28:cc:63:35:86:8a:
27:27:f6:b4:13:21:63:d1:5e:20:ec:03:fc:f6:5e:0d:2d:7d:
cf:2e:6a:ec:38:10:43:b8:2d:08:72:9f:3c:62:a9:57:d9:b0:
9c:27:eb:83:f0:70:be:a4:07:ab:2f:20:e2:d3:d0:1f:d4:0a:
78:a7:2f:0e:d9:fb:fb:20:d7:cb:24:03:95:c1:d7:8f:c0:e2:
24:e2:7b:61:56:b5:db:35:82:bc:97:e7:4c:81:fa:e6:f2:a3:
9e:8c:3f:43:a2:27:a8:4e:2d:37:f7:13:16:fc:b6:99:ba:e0:
c2:a8:9b:43:2e:34:b8:7e:2c:7a:c4:4d:be:b1:d7:4b:1e:1d:
cc:a2:d4:76:ab:b1:1d:d4:00:13:88:8e:96:9e:67:d5:99:bd:
ba:fd:eb:1f:c0:db:91:d5:d9:d7:d6:95:1e:47:73:87:e6:33:
d9:ab:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:35 2025 by rpki-client